CVE-2018-4086

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Security" component. It allows remote attackers to spoof certificate validation via crafted name constraints.
References
Link Resource
http://www.securityfocus.com/bid/102782 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040265 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040267 Third Party Advisory VDB Entry
https://support.apple.com/HT208462 Vendor Advisory
https://support.apple.com/HT208463 Vendor Advisory
https://support.apple.com/HT208464 Vendor Advisory
https://support.apple.com/HT208465 Vendor Advisory
http://www.securityfocus.com/bid/102782 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040265 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040267 Third Party Advisory VDB Entry
https://support.apple.com/HT208462 Vendor Advisory
https://support.apple.com/HT208463 Vendor Advisory
https://support.apple.com/HT208464 Vendor Advisory
https://support.apple.com/HT208465 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:apple_tv:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:06

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/102782 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/102782 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1040265 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040265 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1040267 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040267 - Third Party Advisory, VDB Entry
References () https://support.apple.com/HT208462 - Vendor Advisory () https://support.apple.com/HT208462 - Vendor Advisory
References () https://support.apple.com/HT208463 - Vendor Advisory () https://support.apple.com/HT208463 - Vendor Advisory
References () https://support.apple.com/HT208464 - Vendor Advisory () https://support.apple.com/HT208464 - Vendor Advisory
References () https://support.apple.com/HT208465 - Vendor Advisory () https://support.apple.com/HT208465 - Vendor Advisory

Information

Published : 2018-04-03 06:29

Updated : 2024-11-21 04:06


NVD link : CVE-2018-4086

Mitre link : CVE-2018-4086

CVE.ORG link : CVE-2018-4086


JSON object : View

Products Affected

apple

  • mac_os_x
  • iphone_os
  • watchos
  • apple_tv
CWE
CWE-295

Improper Certificate Validation